3 ms·
Thanks! I like your work on it. I have several ideas on how to generally improve the CSP development that I want to implement, and needed a good infrastructure
by pgilad 8y ago
Thanks! I like your work on it. I have several ideas on how to generally improve the CSP development that I want to implement, and needed a good infrastructure for doing it:
- CSP optimizations, like removing redundant fields (like a minifier)
- CSP parsing
- CSP security warnings or rating (like for unsafe eval)
- CSP Presets, might be general presets, or extendable presets for various tools, like Google Analytics for example
- CSP deprecations and level supports
So far, I've created this tool to help me with it's usage (See https://github.com/pgilad/www.giladpeleg.com/blob/master/scripts/generate-csp.ts https://github.com/pgilad/www.giladpeleg.com/blob/master/scr...), but the best feature is by far using Typescript (I considered using Java) for typed directives and sources.